Paragon Initiative Enterprises: Stored XSS in comments

Comments can contain an author's website. This website is used in the href attribute of link elements and isn't filtered. Thus it allows URLs like javascript:alert1 to be used. These URLs must be filtered by protocol, e.g. only allow http and https. These attacks are blocked by the default CSP, b...

CVE-2005-1721

CVE-2005-1721 : The vulnerability is a buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 that allows an attacker to execute arbitrary code. The provided sources describe the affected component and the basic impact but do not specify affected product versions beyond 1...